Privacy

One steady step at a time. We collect only what the product needs to guide your family, and you can export or delete it at any time.

What we collect

• Account — your email address. There are no passwords; you sign in with a one-time link or code.
• Your workspace — the students you add and the information you enter: plan progress, calendar items, the Student Data record (courses, activities, test scores you mark public, awards), the Brag Sheet artifacts, and your narrative answers.
• Payment — handled by Stripe. We never see or store your card number; we keep a record that a purchase was made.
• Usage — first-party analytics to run and improve the product. We do not use ad pixels or third-party trackers.

How we use it

To run CollegeStones for you: generate your plan and artifacts, keep your calendar, and send the emails you've asked for. That's it. We never sell your data and never show ads.

Email

We keep two separate streams, each with its own unsubscribe: a Service stream (sign-in links, receipts and messages about your account, never promotional) and a separate Commercial stream you opt into.

Children's privacy (13–17)

A student aged 13–17 can be given their own login only when a parent invites them; that invite is the recorded consent (who consented, for which student, and when). We do not knowingly create accounts for children under 13.

Your controls

Any adult in a family can export a full copy of the workspace at any time. Only the account owner can delete it — deletion is permanent after a 30-day grace period. Students can export their own artifacts.

Who we share with

Only the service providers we need to operate: Stripe (payments) and our email provider (to deliver the messages above). We do not sell or rent your information to anyone.

Security & retention

Data is encrypted in transit (TLS). Sign-in is passwordless — there is no password to steal. We run on Amazon Web Services: your workspace lives in a managed PostgreSQL database there. We keep your data while your workspace is active and purge it within 30 days of a deletion request.

Contact

Questions? Email account@collegestones.com.